Malaysia: Department of Personal Data Protection issued notification requiring registration of data users under the Personal Data Protection Act 2010

On 28 July 2025, the Department of Personal Data Protection of Malaysia issued a notice urging companies and organisations that process personal data in commercial transactions to register as data users under the Personal Data Protection Act 2010 [Act 709]. The Act imposes a mandatory registration obligation, requiring entities to submit an application to the Personal Data Protection Commissioner via the Personal Data Protection System (SPDP) and pay a prescribed fee. It was highlighted that the Commissioner is actively monitoring compliance, and those receiving a Data User Registration Compliance Notice must register within 14 days.